What is GHSA-225c-7qjr-pm2w?

GHSA-225c-7qjr-pm2w is a security advisory published by GitHub Security Advisories with Low severity. The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or...

Which CVE IDs does GHSA-225c-7qjr-pm2w cover?

GHSA-225c-7qjr-pm2w covers the following CVE IDs: CVE-2026-93507. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-225c-7qjr-pm2w?

GHSA-225c-7qjr-pm2w has a CVSS v3 base score of 3.3, published by GitHub Security Advisories.

GHSA-225c-7qjr-pm2wLowCVSS 3.3

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-93507 →

📋 Description

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above to duplicate arbitrary posts of any type or status, including other users' private or draft content, and gain read access to the resulting copy.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-93507
https://wpscan.com/vulnerability/21569537-3a83-4df1-a6c2-8ca720e71586
https://github.com/advisories/GHSA-225c-7qjr-pm2w